$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa File: 2ae9989e-b6c5-38a0-9848-866149ae301f.roa (raw, json) Hash identifier: IFIaCWzRM/HJkl9kQFBJKdHhhxFnSBSp4vrNo0Bsmco= Subject key identifier: DB:72:98:77:8C:13:39:F8:69:81:AE:D3:0E:9C:9B:A9:D2:AD:C4:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F576824F6522367FAEDBE3700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396563 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:24:f6:52:23:67:fa:ed:be:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=db2cf5c5-d84f-4372-b05d-02b5bd1cf616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8a:f9:0e:76:4c:dc:77:ef:2f:2d:5d:6e:97: 6e:e4:4d:b1:7e:84:df:72:89:b3:9f:8d:b0:3c:03: fd:e2:0f:6b:ec:b2:41:75:1a:ed:9c:36:98:ea:ab: 1d:8a:74:ab:77:50:a9:5e:fe:71:80:91:ca:33:ae: 79:31:77:75:69:db:40:db:bf:b9:28:8a:29:b1:1b: 48:16:21:15:2e:63:3e:99:9f:56:8a:99:64:66:05: 61:7a:fe:16:2e:4d:a3:97:3f:94:1d:5a:dc:cb:f5: d6:cb:95:41:35:4b:cf:e1:fd:13:70:63:ce:b3:b6: 94:a4:75:66:71:9d:0c:aa:cc:dd:61:f7:37:3c:cd: d7:75:d0:27:44:cc:1b:33:09:d9:e3:1d:68:69:5e: 02:8c:58:99:e7:ee:aa:d0:e9:27:fa:23:25:81:a4: 4b:10:a1:d6:41:05:2c:0c:0f:a4:45:b8:7a:84:52: d7:0b:13:f7:00:03:40:3f:62:51:4a:6a:d8:34:c3: 74:37:b4:e2:7a:2b:fe:89:4a:b8:89:2f:d3:b7:72: b6:a5:4e:22:f8:66:54:c1:d7:4b:26:72:1f:5b:b6: e6:c5:a0:23:8f:2c:f4:86:5a:79:e7:86:88:59:70: a3:97:97:fa:30:cc:43:98:db:64:f6:02:1d:a7:8e: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:72:98:77:8C:13:39:F8:69:81:AE:D3:0E:9C:9B:A9:D2:AD:C4:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ee:0c:18:09:18:27:45:0e:88:ee:7d:b2:3b:97:fb:ca:fc: 67:2f:43:ef:cc:f6:dd:bb:43:f1:f2:9a:d6:cd:03:d4:ef:0b: ee:6a:51:75:f6:1c:38:ea:ae:16:6a:0b:0a:8e:fb:ad:13:9f: e0:29:f0:55:eb:92:af:e6:d9:96:58:ed:86:8f:49:de:6a:6e: 59:f5:c9:4c:c3:ed:e7:bb:48:83:7f:08:b5:16:de:d2:b2:fb: e5:16:ed:4f:96:04:f2:9b:c5:6f:47:cd:a5:36:fc:5c:c7:2a: de:c6:83:ac:e9:97:22:c2:6a:d2:5a:d5:c8:9c:d2:a6:f6:1a: d0:03:36:3c:2b:2c:f6:37:e5:18:d6:e1:05:be:17:c1:71:70: 59:49:12:07:0b:98:74:b0:a8:1e:89:1c:6c:67:7f:67:26:b8: 72:2d:1e:9d:b8:b2:9f:47:2a:e6:e0:c1:39:b2:b4:c6:24:f9: f2:7a:d1:c4:b3:05:47:55:82:dd:79:a5:96:a8:31:44:96:49: 93:27:8a:cf:7e:2a:be:89:b4:00:b7:da:18:9f:a5:ee:4c:d9: ec:5d:0e:be:05:c3:da:d4:6c:0e:2b:77:ab:fd:b3:d0:17:06: 01:09:db:e3:b8:3c:5b:11:b1:29:f7:b8:27:7a:c0:b9:f5:b8: 5c:b7:7c:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCT2UiNn+u2+NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGIyY2Y1YzUtZDg0Zi00MzcyLWIwNWQtMDJiNWJkMWNmNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIr5DnZM3HfvLy1dbpdu5E2xfoTfcomzn42w PAP94g9r7LJBdRrtnDaY6qsdinSrd1CpXv5xgJHKM655MXd1adtA27+5KIopsRtI FiEVLmM+mZ9WiplkZgVhev4WLk2jlz+UHVrcy/XWy5VBNUvP4f0TcGPOs7aUpHVm cZ0MqszdYfc3PM3XddAnRMwbMwnZ4x1oaV4CjFiZ5+6q0Okn+iMlgaRLEKHWQQUs DA+kRbh6hFLXCxP3AANAP2JRSmrYNMN0N7Tieiv+iUq4iS/Tt3K2pU4i+GZUwddL JnIfW7bmxaAjjyz0hlp554aIWXCjl5f6MMxDmNtk9gIdp46r0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNtymHeMEzn4aYGu0w6cm6nSrcT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmFlOTk4OWUtYjZjNS0z OGEwLTk4NDgtODY2MTQ5YWUzMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDuDBgJGCdFDojufbI7l/vK/GcvQ+/M9t27Q/HymtbNA9TvC+5q UXX2HDjqrhZqCwqO+60Tn+Ap8FXrkq/m2ZZY7YaPSd5qbln1yUzD7ee7SIN/CLUW 3tKy++UW7U+WBPKbxW9HzaU2/FzHKt7Gg6zplyLCatJa1cic0qb2GtADNjwrLPY3 5RjW4QW+F8FxcFlJEgcLmHSwqB6JHGxnf2cmuHItHp24sp9HKubgwTmytMYk+fJ6 0cSzBUdVgt15pZaoMUSWSZMnis9+Kr6JtAC32hifpe5M2exdDr4Fw9rUbA4rd6v9 s9AXBgEJ2+O4PFsRsSn3uCd6wLn1uFy3fJU= -----END CERTIFICATE-----Generated at Wed Oct 7 07:40:43 2026 by rpki-client